Hi, Le 11/12/2017 à 16:08, Christian Weisgerber a écrit : > Do users actually exist who have access to http but not to https?
I don't know about users, but caching is not possible anymore as soon you use end-to-end HTTPS. This is a reason why I personally like software and system updates to be served through HTTP instead of HTTPS. You don't need to fetch the same update for each environment each time from the remote vendor's system, you just need them to be somehow signed by him to ensure their authenticity. This was just to give an example of why one would prefer to use HTTP over HTTPS, and how as highlighted by Karl Denninger a system which does too much may actually be harmful. When you need signature, then apply signature, don't add encryption, tunneling, dynamic cipher suites negotiation, session keys exchange and so on as overhead. Regards, Simon. -- WhiteWinterWolf https://www.whitewinterwolf.com _______________________________________________ freebsd-security@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscr...@freebsd.org"
